meta88 Privacy Policy — Your Data, Handled With Care

01 Introduction

meta88 operates the website accessible at https://meta88.click and related mobile-optimised interfaces. This Privacy Policy sets out how meta88 collects, uses, stores, discloses, and otherwise processes personal data obtained from players registered or resident in Malaysia, including those accessing the platform from Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and other locations across the country.

By creating a meta88 account, using the platform's services, or submitting any personal data, you acknowledge that you have read this Privacy Policy and agree to the practices described. This policy operates alongside the meta88 Terms & Conditions and Responsible Gambling rules, both of which should also be reviewed. If you do not agree with the terms of this policy, you should not register or continue to use meta88.

02 Definitions

In this Privacy Policy, the following terms carry the meanings set out below:

• "Personal Data" means any information that identifies or could reasonably identify a living individual, including name, identification number, contact details, financial information, and device identifiers.
• "Processing" means any operation performed on personal data, including collection, recording, storage, retrieval, use, disclosure, and deletion.
• "Controller" means the entity that determines the purposes and manner of processing personal data — in this context, meta88.
• "Processor" means any party that processes data on behalf of meta88, such as payment providers or KYC verification services.
• "Consent" means a freely given, specific, informed, and unambiguous indication of agreement to the processing of personal data.
• "Player" or "you" refers to the registered account holder or any visitor using the meta88 platform.
• "Sensitive Data" means personal data that requires a higher degree of protection, including identity document copies, payment source records, and responsible-gambling self-disclosures.

03 Data We Collect

meta88 collects personal data through several channels: information you provide during registration and ongoing account management; data generated automatically by your interaction with the platform; and information obtained from third parties as part of KYC and fraud-prevention processes.

meta88 collects only data that is proportionate and relevant to the stated purpose. Where possible, collection is limited to the minimum required to deliver the service, comply with applicable obligations, and protect the security of the platform and its users.

04 How We Use Your Data

meta88 processes personal data for the following purposes:

• Account creation and management: Registering and maintaining your meta88 account, verifying eligibility, processing login credentials, and maintaining account records.
• Identity verification and KYC: Confirming your age (minimum 21), verifying your identity against submitted documents, and fulfilling anti-money-laundering obligations.
• Payment processing: Facilitating MYR deposits and withdrawals through supported Malaysian banking channels including FPX, DuitNow, Maybank2u, CIMB Clicks, Public Bank, Hong Leong Connect, Touch 'n Go eWallet, Boost, GrabPay, and cryptocurrency channels.
• Service delivery: Operating the sportsbook, live casino, slots library, promotions, VIP programme, and customer support.
• Fraud prevention and security: Detecting unusual patterns, preventing unauthorised access, investigating suspected abuse, and maintaining platform integrity.
• Responsible gambling: Monitoring play patterns relevant to responsible gambling tools, applying voluntary or mandatory restrictions, and communicating with players who may be at risk.
• Legal compliance: Meeting applicable reporting, record-keeping, and regulatory obligations.
• Service improvement: Analysing anonymised or aggregated usage data to improve platform performance, product development, and the overall player experience.

meta88 does not use personal data to make fully automated decisions that produce significant legal or similarly material effects on players without human oversight.

05 Legal Basis for Processing

meta88 processes personal data on the following legal bases:

• Contractual necessity: Processing required to provide the services you signed up for, including account management, bet settlement, and payment execution.
• Legal obligation: Processing necessary to comply with KYC requirements, anti-money-laundering obligations, and other applicable legal duties.
• Legitimate interests: Processing carried out for fraud detection, network security, responsible gambling risk assessment, and platform improvement, where those interests are not overridden by your privacy rights.
• Consent: Where you have provided informed consent for a specific purpose, such as receiving promotional communications. Consent may be withdrawn at any time by contacting meta88 support.

06 Disclosure to Third Parties

meta88 does not sell or rent personal data. Data may be shared with the following categories of third parties only to the extent required for the stated purpose:

• Payment processors and banking partners: Malaysian and international providers that facilitate MYR transactions, including the banking rails behind DuitNow, FPX, and e-wallet services. These providers receive only the payment-relevant data necessary to execute a specific transaction.
• KYC and identity verification providers: Third-party services that assist in verifying identity documents and checking against relevant watchlists or databases as required.
• Fraud and security vendors: Technology providers that help detect suspicious activity, bot traffic, and account security threats.
• Game technology providers: Licensed studios and platform suppliers whose games are served through meta88 may receive gameplay data necessary to operate those games and resolve disputes.
• Regulatory and legal authorities: Government agencies, law enforcement, or courts where disclosure is legally required or necessary to protect the rights and safety of meta88 or its users.
• Professional advisers: Lawyers, auditors, and insurers acting under confidentiality obligations in the course of legitimate business support.

All third-party processors engaged by meta88 are required to handle personal data in accordance with contractual data protection obligations that are consistent with this policy.

07 Data Retention

meta88 retains personal data for the period necessary to fulfil the purpose for which it was collected, supplemented by any legally required minimum retention period. In practice:

• Active account data is retained for the duration of your registration.
• Transaction and betting records are typically retained for a minimum of five years following the transaction date, in line with financial record-keeping standards applicable to online payment processing.
• KYC documents and identity verification records are retained for a period consistent with applicable anti-money-laundering obligations, which may extend beyond account closure.
• Responsible gambling records, including self-exclusion elections and deposit limit histories, are retained for a period sufficient to prevent circumvention of restrictions across new or reinstated accounts.
• Marketing preferences and consent records are retained for as long as necessary to demonstrate compliance or until withdrawn.

When data is no longer required, it is securely deleted or anonymised. Anonymised data may be retained indefinitely for statistical and analytical purposes where no individual can be re-identified.

08 Security Measures

meta88 applies technical and organisational measures to protect personal data against unauthorised access, loss, alteration, or disclosure. These measures include:

• SSL/TLS encryption for all data transmitted between your device and the meta88 platform.
• Access controls restricting internal system access to authorised personnel on a need-to-know basis.
• Two-factor authentication options for account access, reducing the risk of unauthorised login.
• Regular security testing, vulnerability scanning, and incident monitoring.
• Documented procedures for responding to, containing, and notifying relevant parties of data security incidents where required.

09 Cookies and Tracking Technologies

meta88 uses cookies and similar tracking technologies on the platform. A cookie is a small file placed on your device that helps the platform function, remember preferences, and collect analytical data. The main categories used are as follows:

Essential cookies cannot be disabled as they are necessary for the platform to function. You may manage non-essential cookies through your browser settings. Disabling certain cookies may affect functionality, such as requiring you to re-enter preferences on subsequent visits.

10 Your Data Rights

Subject to applicable law and proportionate identity verification, you have the following rights in relation to your personal data held by meta88. Requests should be submitted in writing to the contact details set out in Section 13.

• Right of access: You may request confirmation of whether meta88 holds personal data about you and, if so, a copy of that data along with information about how it is processed.
• Right of correction: You may request that inaccurate or incomplete personal data held by meta88 be corrected or updated.
• Right of erasure: In certain circumstances, you may request that personal data be deleted. This right is subject to overriding legal, regulatory, or contractual obligations that require retention.
• Right to restrict processing: You may request a pause on the processing of your data while accuracy or legitimacy is investigated.
• Right to object: You may object to processing based on legitimate interests, including direct marketing communications.
• Right to withdraw consent: Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of processing prior to withdrawal.

meta88 will respond to data rights requests within a reasonable period. Some requests may be declined where permitted by applicable law — for example, where complying would conflict with legal retention requirements or prejudice an active fraud investigation.

11 Children and Underage Persons

meta88 is strictly for adults aged 21 and above. The platform does not knowingly collect personal data from any person below the minimum age. Age is verified as part of the KYC process. If meta88 becomes aware that personal data has been collected from an underage individual, that data will be deleted and the associated account will be closed.

If you are a parent or guardian and believe that a person under 21 has provided personal data to meta88, please contact support immediately so that appropriate action can be taken.

12 Changes to This Privacy Policy

meta88 may update this Privacy Policy from time to time to reflect changes in services, technology, legal obligations, or regulatory guidance. When material changes are made, the updated version will be published at https://meta88.click/privacy-policy and you may receive a notification through the account interface or by email where appropriate.

Your continued use of meta88 following the publication of an updated Privacy Policy constitutes acceptance of the revised terms. We encourage you to review this policy periodically. The document metadata at the top of the page indicates the current status of this version.

13 Contact Us

For questions, concerns, corrections, or formal data rights requests relating to this Privacy Policy, please contact meta88 in writing. Correspondence should include your registered email address, account reference number where applicable, the specific data or processing activity in question, and a clear description of your request or concern.

Contact email: [email protected]

This address is displayed as plain text for your security. Do not share your full account password, PIN, or sensitive identity documents in an initial contact email — meta88 will guide you to a secure submission channel if required. We aim to acknowledge enquiries promptly and to provide a substantive response within 30 calendar days.